Identity-Based Cryptography for Delayed-Tolerant Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data transmission techniques in environments like space and unmanned vehicles face delays and disruptions due to the need for prior external communication of cryptography keys, which is not ideal for intermittent or opportunistic networks.
Innovation Solution
A system for secured data transmission using identity-based cryptography that generates unique public encryption keys and manages revocation lists, allowing secure data transfer between end-point computers and operational systems without requiring key exchanges, utilizing secure message transmission devices with key generation and messaging modules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If prior external communication of cryptography keys is required before data transmission, then secure communication is achieved, but transmission delay increases
Solution Approach 1:
The patent applies preliminary action by pre-distributing public keys to all potential recipients before actual data transmission occurs. Each node in the network receives and stores public keys of other nodes in advance, so when data needs to be transmitted, the encryption can occur immediately without requiring real-time key exchange. This resolves the contradiction by performing the security setup work beforehand, eliminating transmission delays while maintaining secure communication.
2Ease of operation
If third-party device pushes keys to all senders, then key distribution is simplified, but network interaction complexity increases
Solution Approach 1:
The patent extracts the key distribution function from the data transmission process itself. Instead of requiring third-party intervention during each transmission or complex push mechanisms, the system separates key distribution as an independent preliminary step where public keys are distributed once to all nodes. This extraction simplifies the overall system by removing the need for continuous third-party involvement in data transmission operations.
Solution Approach 2:
The patent creates a universal public key that can be used by any sender to encrypt data for any recipient in the network. This single public key serves multiple functions: it enables encryption for all potential recipients, eliminates the need for separate key pairs for each communication pair, and simplifies the transmission process. The universality principle resolves the contradiction by making the key distribution system adaptable to any sender-recipient pair without increasing interaction complexity.
3Reliability
If cryptography key exchange is required before transmission, then data security is ensured, but opportunistic network efficiency decreases
Solution Approach 1:
The patent applies preliminary action by distributing public keys to all network nodes before opportunistic data transmission occurs. This advance preparation ensures that when transmission opportunities arise in the intermittent network, data can be encrypted and sent immediately without requiring real-time key exchange. The security requirement is satisfied through pre-distributed keys, while network efficiency is improved by eliminating delays during actual transmission events.
Data Source
AI summary
A system is provided for secure data transmission. The system stores a public master key, private decryption key and secure messaging module for securely transmitting and receiving a digital model data file for transmission via a work order message. For transmitting and receiving the work order message, the system generate public encryption keys using a key generation algorithm in which each of the public encryption keys are unique to a designated message recipient and generated using an input including the public master key, a validity period, and an identifier of the designated message recipient. The system may also store a revocation list that includes identifiers of message recipients that have revoked access to the public master key or private decryption key, and based thereon determine whether or not to encrypt and transmit the work order message, or receive and decrypt the work order message.